OBEN
Life insurance carriers today encounter two areas where U.S. regulators have established obligations regarding the insurers’ use of external consumer data: state laws and the National Association of Insurance Commissioners (NAIC). We’ll discuss the implication for Life underwriting and risk-based pricing:
After looking at Disparate Impact Testing in our previous blog, where we provided background on the concepts of algorithmic accountability and proxy discrimination, this blog will describe the current, evolving regulatory environment and make some projections about the future.
The Colorado statute ranges widely over insurance practices in all lines of business and all protected classes. Practices extend beyond underwriting to marketing and claims management. It responds to concern over use of computational algorithms that utilize “external consumer data and information sources” (ECDIS).
The statute delegates implementation to the commissioner, Department of Insurance, who has held four stakeholder meetings. In order to assist the legislative process, the ACLI drafted and presented a set of comprehensive proposed regulations.3
Colorado establishes two conditions for analysis of unfair discrimination and obligations for reporting and managing use of ECDIS. The main purpose of the analysis and reporting is to examine potential unfair discrimination.
Every element of this framework requires specific definitions. Both the proposed regulation by the American Council of Life Insurers (ACLI) and the Colorado law provide them.
Noteworthy in the description of ECDIS are the examples and the exclusions. The examples include non‑FCRA (Fair Credit Reporting Act) compliant evidence that is prohibited in underwriting but allowed in marketing. Facial and vocal recognition were often cited in meetings. The exclusions represent “safe harbor” to protect continued use of evidence never questioned before the recent use of algorithms and models. The definitions highlight the difficulty of classification of each element of evidence and the need to maintain access to some ECDIS for purposes other than risk classification.
“Unfairly discriminate” and “unfair discrimination” include the use of one or more external consumer data and information sources, as well as algorithms or predictive models using external consumer data and information sources, that have a correlation to race, color, national or ethnic origin, religion, sex, sexual orientation, disability, gender identity, or gender expression, and that use results in a disproportionately negative outcome for such classification or classifications, which negative outcome exceeds the reasonable correlation to the underlying insurance practice, including losses and costs for underwriting.
This definition still omits crucial features. When does negative outcome reach disproportionate or exceed reasonable correlation?
Although the language covers all protected classes, race dominates the present discussion. Some categories of discrimination could conflict with effective insurance practice. Can we continue to protect underwriting for disabilities in the sale of Individual Disability insurance? Does gender-specific pricing stand? And the big question about race and many other categories of discrimination is “How can a carrier analyze this demographic information that it does not possess?”
Colorado has exposed some measures on implementation of the statute. They include a survey and a data call. To match the analysis work to department resources, Colorado will sample carriers with in‑state business. They have identified 25 carriers with the highest number of in‑force Individual Life policies. Both the ranking and the analysis will examine Individual Life only, excluding (for now at least) Individual Disability Income and Long Term Care. From the top 25, Colorado has randomly selected five carriers for data submission. Ten others will receive the survey.
The Colorado Division of Insurance’s survey draft probes company policy on unfair discrimination.4 Consider their question 4:
4. Which of your company's external data sources, predictive models, or insurance practices (for example, underwriting as a whole) are currently tested for Unfair Discrimination? Please provide a comprehensive list. For each item in the list, how often is it tested?
Presumably many carriers will eventually get a turn at the survey and data submission. The implication is that all carriers are now obligated to assess unfair discrimination in ECDIS and algorithms.
The data call will support testing for unfair discrimination by race. Initially, Colorado proposed a data structure to include name and address and underwriting decision (offer or decline). Colorado would impute race and conduct testing for unfair discrimination. Concern over transfer of Personally Identifiable Information led to a change for carriers themselves to conduct testing and report results. That brings us to the central question of ascertainment of race.
Colorado has emphasized an algorithm adapted from RAND Corporation called “Bayesian Improved First Name Surname Geocoding” (BIFSG).5 This model proposes racial group assignment from name and address.
Carriers may not want any link to race in their customer records. To comply with Colorado’s mandate to perform and report testing for unfair racial discrimination will necessitate use of an outside vendor to impute race.
The industry has expressed concern over distribution of the results of analysis for unfair racial discrimination.
While the mechanism of data production has taken form, interpretation has not. To make a determination of unfair discrimination requires a yardstick for racial group distribution. The yardstick will vary with the population analyzed. Consider that Colorado does not resemble the entire U.S.. Any method of ascertainment of race results in ambiguity and inaccuracy. Consider people who identify with multiple or uncommon races. BIFSG will misclassify some portion of people. Interpretation needs a threshold for deviation from the yardstick.
The ACLI model regulation established a principles-based framework that can align with actuarial professional responsibility to guide such elements of interpretation. In our opinion, that is preferable to enactment of universal rules.
The other established process for evaluation of proxy discrimination is in the NAIC market conduct annual statement (MCAS). It is much less developed and detailed than Colorado’s statute.
Beginning in the 2024 MCAS for 2023, business interrogatories will include categorization of what NAIC has defined as accelerated underwriting or not. Despite the terminology, the crux of differentiation of accelerated underwriting in MCAS is the use of algorithms, models and consumer data rather than speed of decision. In the working discussions to draft the definitions and interrogatories the rationale expressed for attention to the process was to investigate unfair discrimination. Although in these interrogatories there is no assessment of protected class, the implication is that they will follow.
In multiple jurisdictions, legislators and regulators have turned their attention to discrimination of protected classes of consumers that may occur when insurers use data science and consumer data. Colorado and the NAIC MCAS have established concrete requirements for insurers to follow.
Gen Re believes that all insurers have an obligation to consider potential unfair discrimination that could be embedded in various practices.
Endnotes last accessed 15.11.2022.
